Week 21 – 2016

SOFTWARE UPDATES Last week I mentioned that Magnet updated IEF to version 6.7.8. From the release notes this update is mainly bug fixes. . CRU has updated their WriteBlocking Validation Utility to version 1.1.0.3. The new version reformats the test reports, updates the help file, allows for pausing tests, adds support for drives larger than 2.2TB […]

Week 20 – 2016

SOFTWARE UPDATES Magnet released IEF version 6.7.8 however I wasn’t able to get a copy of the release notes to summarise them. . Didier Stevens has published a new YARA rule for identifying portable executables created with pyinstaller. This post here explains the impetus for the rule and what it looks for. New YARA Rule: PE_File_pyinstaller […]

Week 19 – 2016

Week 19! Trying a slightly different format this week to divide thing up a bit better. SOFTWARE UPDATES Cellebrite have released a maintenance release for UFED Physical and Logical Analyzer, now at version 5.0.2. The main feature of this update is decryption of the new Whatsapp Crypt9 backup databases. (If you don’t have a copy […]

Week 18 – 2016

Week 18! Software updates DVR Examiner was updated to version 1.21.0 adding support to the ICATCH_264 and JDX_264 file systems as well as correcting some bugs and making improvements to existing file system support. DVR Examiner 1.21.0 – Support for ICATCH, ELEC and more! Nuix version 7 has been released to their customers and apparently […]

Week 17 – 2016

Week 17! Software updates Eric Zimmerman has updated bstings to version 1.1. The new version adds a few new switchings to allow output suppression, regex matching for individual matches as opposed to the entire string and inputting search strings from a file. There were also minor performance improvements. bstrings v1.1 released! Eric also updated LECmd […]